dependabot-composer 0.148.2 → 0.148.7

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 535cda0073949afaeeff6c81d4e987bdc454d5928896e00a61da71ffbb03bb62
-  data.tar.gz: 881f412a164b4944d4782bd85c40a4e1a89dc90494fe67ae56497bf6f044cd8a
+  metadata.gz: a613fdb3aa21af55cf74e933adfb52a18efa61bd35e7a3fff5929b08b93231da
+  data.tar.gz: 641d9ac50c19b3be20ad01e76d586c54fadc300d5db70348173b8d192903bfe0
 SHA512:
-  metadata.gz: 37f0f4c2f3b810989bd580b5695c4d1d603a7e562759983e904b0da15811c0cdf6559b20ecd9616276439564d95ca6395302526be4cad0021dcf7c349b487f4b
-  data.tar.gz: d0a8c3de007fa3038e91483fbe622011d97a8500319ae86455762879061e12b3441f1cea7adeaf225d318b8c2712a834cfc6cbeb1b86b554967a433e2e939b0e
+  metadata.gz: ea6d74ff4dfd0a6c7f477447b35b0d7063f5e4dc9912907ece62a9236601f5ae837b2aa599b0fdaf11c0d6eb04b46948413dcf334a07f89a5ef83f006d9ac656
+  data.tar.gz: 2d39a98f5b398cd6ee7d77a4cf4fa7386ca03e32cb132d604402d4decb897c026e21ec0d9a18cd72e9cec0b426d7a36b38241f9538b66172bc2b0864eec69a02

data/lib/dependabot/composer/update_checker/latest_version_finder.rb

@@ -75,6 +75,8 @@ module Dependabot
         end
 
         def filter_lower_versions(versions_array)
+          return versions_array unless dependency.version
+
           versions_array.
             select { |version| version > version_class.new(dependency.version) }
         end

data/lib/dependabot/composer/update_checker/version_resolver.rb

@@ -336,6 +336,11 @@ module Dependabot
             #
             # Package is not installed: stefandoorn/sitemap-plugin-1.0.0.0
             nil
+          elsif error.message.include?("does not match the expected JSON schema")
+            msg = "Composer failed to parse your composer.json as it does not match the expected JSON schema.\n"\
+                  "Run `composer validate` to check your composer.json and composer.lock files.\n\n"\
+                  "See https://getcomposer.org/doc/04-schema.md for details on the schema."
+            raise Dependabot::DependencyFileNotParseable, msg
           else
             raise error
           end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: dependabot-composer
 version: !ruby/object:Gem::Version
-  version: 0.148.2
+  version: 0.148.7
 platform: ruby
 authors:
 - Dependabot
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-19 00:00:00.000000000 Z
+date: 2021-05-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: dependabot-common
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.148.2
+        version: 0.148.7
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.148.2
+        version: 0.148.7
 - !ruby/object:Gem::Dependency
   name: byebug
   requirement: !ruby/object:Gem::Requirement